Description
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
References
- 20000829 More Helix Code installation problems (go-gnome) mailing-list
- 20000829 Helix Code Security Advisory - go-gnome pre-installer mailing-list
- 1622 vdb-entry